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Abstract 

Here,  we  show  that  if  E  is  a  CM  elliptic  curve  with  CM  field 
Q(V~d),  then  the  set  of  n  for  which  the  nth  Fibonacci  number  Fn 
satisfies  an  elliptic  Korselt  criterion  for  Q(V~d)  (defined  in  the  paper) 
is  of  asymptotic  density  zero. 
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1  Introduction 


Let  b  >  2  be  an  integer.  A  composite  integer  n  is  a  pseudoprime  to  base  b 
if  the  congruence  bn  =  b  (mod  n)  holds.  There  are  infinitely  many  pseu¬ 
doprimes  with  respect  to  any  base  b ,  but  they  are  less  numerous  than  the 
primes.  That  is,  putting  Hb(x)  for  the  number  of  base  b  pseudoprimes  n  <  x, 
a  result  of  Pomerance  [9]  shows  that  the  inequality 

Kb(x)  <  x/L(x)1^2  where  L(X)  =  exp  (log  x  log  log  log  xf  log  log  x) 

holds  for  all  sufficiently  large  x.  It  is  conjectured  that  i Tb(x)  =  x / L(x)1+°^ 
as  x  — *  oo. 

Let  {Fn}n> o  be  the  sequence  of  Fibonacci  numbers  Fn+1  =  Fn  +  Fn_i  for 
n  >  1  with  F0  =  0,  Fi  =  1,  and  {Ln}n> 0  be  its  companion  Lucas  sequence 
satisfying  the  same  recurrence  with  initial  conditions,  L0  =  2 ,  Li  =  1.  For 
the  Fibonacci  sequence  {F’n.jnyi  is  was  shown  in  [7]  that  the  set  of  n  <  x 
such  that  Fn  is  a  prime  or  a  base  b  pseudoprime  is  of  asymptotic  density 
zero.  More  precisely,  it  was  shown  that  the  number  of  such  n  <  x  is  at  most 
5x/  logo:  if  x  is  sufficiently  large. 

Since  elliptic  curves  have  become  very  important  in  factoring  and  pri- 
mality  testing,  several  authors  have  defined  and  proved  many  results  on 
elliptic  pseudoprimes.  To  define  an  elliptic  pseudoprime,  let  E  be  an  el¬ 
liptic  curve  over  Q  with  complex  multiplication  by  Q (y/—d).  Here,  d  G 
{1,  2,  3,  7, 11, 19, 43,  67, 163}.  If  p  is  a  prime  not  dividing  6AE,  where  AE  is 
the  discriminant  of  E,  and  additionally  (— d\p)  =  —1,  where  (a\p)  denotes 
the  Legendre  symbol  of  a  with  respect  to  p ,  then  the  order  of  group  of  points 
on  E  modulo  p  denoted  #E( Fp),  equals  p  + 1.  In  case  p  \  AE  and  (— d\p)  =  1, 
we  have  #E(FP)  =  p  +  1  —  ap  for  some  nonzero  integer  ap  with  \ap\  <  2 v/p. 
Gordon  [3],  used  the  simple  formula  for  #E(Fp)  in  the  case  (— d\p)  =  —l 
to  define  the  following  test  of  compositeness:  Let  Q  be  a  point  in  E( Q)  of 
infinite  order.  Let  N  >  163  be  a  number  coprime  to  6  to  be  tested.  We 
compute  (— d\N).  If  it  is  1  we  do  not  test  and  if  it  is  0,  then  N  is  composite. 
If  it  is  —1,  then  we  compute  [N  +  1  ]Q  (mod  N).  If  it  is  not  O  (the  identity 
element  of  A(Q)),  then  N  is  composite  while  if  it  is  O,  then  we  declare  N  to 
be  a  probable  prime  for  Q  e  E.  So,  we  can  define  At  to  be  a  pseudoprime 
for  Q  G  E  if  it  is  composite  and  probable  prime  for  Q  G  E.  The  count¬ 
ing  function  of  elliptic  pseudoprimes  for  Q  G  E  has  also  been  investigated 
by  several  authors.  The  record  belongs  to  Gordon  and  Pomerance  [4],  who 
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showed  that  this  function  is  at  most  exp(loga:  —  |  logL(x))  for  x  sufficiently 
large  depending  on  Q  and  E.  We  are  not  aware  of  research  done  on  the  set 
of  indices  n  for  which  Fn  can  be  an  elliptic  psendoprime  for  Q  G  E. 

There  are  composite  integers  n  which  are  pseudoprimes  for  all  bases  b. 
They  are  called  Carmichael  numbers  and  there  exist  infinitely  many  of  them 
as  shown  by  Alford,  Granville  and  Pomerance  in  1994  in  [1],  They  are  also 
characterized  by  the  property  that  n  is  composite,  squarefree  and  p—  1  n  —  1 
for  all  prime  factors  p  of  n.  This  characterization  is  referred  to  as  the  Korselt 
criterion. 

Analogously,  given  a  fixed  curve  E  having  CM  by  Q(V—d),  a  composite 
integer  n  which  is  an  elliptic  pseudoprime  for  all  points  Q  of  infinite  order 
on  E  is  called  an  elliptic  Carmichael  number  for  E.  Fix  d  e  D.  The  authors 
of  [2]  defined  the  following  elliptic  Korselt  criterion  which  ensures  that  n  is 
an  elliptic  Carmichael  number  for  any  E  with  CM  by  Q(a J—d)  provided  that 
(N,  Ae)  =  1. 

Theorem  1.  (EPT)  Let  N  be  squarefree,  coprime  to  6,  composite,  with  an 
odd  number  of  prime  factors  p  all  satisfying  (—d\p)  =  —1  and  p  +  1  |  N  +  1. 
Then  N  is  an  elliptic  Carmichael  number  for  any  E  with  CM  by  Q(y/—d) 
provided  that  (N,  Ae)  =  1. 

We  call  positive  integers  N  satisfying  the  first  condition  of  Theorem  1 
elliptic  Korselt  for  Q(y/—d).  In  [2],  it  is  shown  that  there  are  infinitely  many 
elliptic  Korselt  numbers  for  Q(v— d)  for  all  d  G  D  under  some  believed 
conjectures  from  the  distribution  of  prime  numbers.  It  was  recently  shown 
by  Wright  [10]  that  the  number  of  elliptic  Carmichael  numbers  up  to  x  is 

f  K  log  x  \ 

>  exp  - —  with  some  positive  constant  K 

\  (log  log  log  x)z  J 

for  all  x  >  100. 

Here,  we  fix  d  G  D  :=  {1,  2, 3,  7, 11, 19, 43,  67, 163}  and  look  at  the  set  of 
numbers 

=  {n  :  Fn  is  elliptic  Korselt  for  Q(v^— rf)}. 

It  is  easy  to  prove  that  AA1'  =  0.  Namely,  since  F2n+ i  =  Ff  +  Ffl+  { ,  it  follows 
that  if  r  >  5  is  an  odd  prime,  then  all  prime  factors  of  Fr  are  congruent  to  1 
modulo  4.  In  particular,  (— l|p)  =  1  for  all  prime  factors p  of  Fr.  Since  Fr  \  Fn 
for  all  r  \  n,  then  the  primes  p\Fr  (recall  that  they  all  satisfy  (— l|p)  =  1) 
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would  divide  Fn  but  that  is  impossible  since  Fn  is  Korselt  and  its  prime  factors 
must  satisfy  (— l\p)  =  —1.  This  shows  that  if  n  G  J\f^\  then  n  cannot  have 
prime  factors  r  >  5,  therefore  n  —  2a  ■  36,  which  is  impossible  since  Fn  must 
be  coprime  to  6.  It  is  likely  that  J\T^l}  is  hnite  for  all  d  G  .D\{1}  (or  even 
empty)  but  we  do  not  know  how  to  prove  such  a  strong  result.  Instead,  we 
settle  for  a  more  modest  goal  and  prove  that  JV^  is  of  asymptotic  density  0. 
For  a  subset  A  of  the  positive  integers  and  a  positive  real  number  x  put 
A(x)  —  A  fl  [1,  x]. 


2  The  result 


We  prove  the  following  result. 


Theorem  2.  For  d  G  Z}\{1},  we  have 


M[d\x)  < 


^(logloga;)1/2 

(logx)1/2 


Proof.  Let  Q  be  the  set  of  primes  q  =  2,  3  (mod  5).  Let  x  be  a  large  positive 
real  number  and  y  be  some  parameter  depending  on  x  to  be  made  more 
precise  later.  Consider  n  G  A f(x),  where  we  omit  the  dependence  on  d  for 
simplicity.  Put  N  =  Fn.  Our  proof  uses  the  fact  that  N  is  coprime  to  6  but 
it  does  not  use  the  fact  that  (— d\p)  =  —1  for  all  prime  factors  p  of  N.  We 
distinguish  several  cases. 

Case  1.  n  gM (x)  —  {n  <x  :  q  \  n  for  any  q  G  Q  fl  (y,  x)}. 

By  Bran’s  sieve  (see,  for  example,  Theorem  2.3  on  Page  70  in  [5]),  we 
have 


y<p<x 


From  now  on,  we  work  with  n  G  J\f(x)\J\fi(x),  so  there  exists  q  G  Q  with 
q  >  y  such  that  q  \  n.  Since  such  q  =  2,  3  (mod  5),  it  follows  that  Fq  =  —  1 
(mod  q).  Furthermore,  let  p  be  any  prime  factor  of  Fq.  Then  p  =  ±1 
(mod  q).  Since  Fq  =  —  1  (mod  q),  at  least  one  of  the  prime  factors  p  of  Fq 
has  the  property  that  p  =  —  1  (mod  q).  Thus,  q  \  p  +  1.  Since  p  +  1  |  Fn  +  1, 
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we  get  that  q  j  Fn  +  1.  Note  that  4  \n  because  otherwise  Fn  is  a  multiple  of 
F4  =  3,  which  is  not  possible.  We  now  use  the  fact  that 

Fn  +  1  -f(n+<5)/2-b(n— <5)/2; 

for  some  5  G  {±1,  ±2}  such  that  n  =  8  (mod  4).  Thus, 

Q  |  -^(n+<5)/2-b(n— <5)/2  |  Fn— fiFn+fi. 

Hence,  either  q  \  Fn_s  or  q  \  Fn+g.  This  shows  that  if  we  put  z(q )  for  the 
index  of  appearance  of  q  in  the  Fibonacci  sequence,  then  n  =  ±5  (mod  z(q)). 

Put  7 Z  =  {q  :  z(q)  <  q F3}.  By  a  classical  argument  due  to  Hooley  [6],  we 
have 

#ft(t)  <  t2/3.  (2) 


Case  2.  M2{x)  =  {n  G  M\{x)\M{x)  :  q  G  7£}. 

If  n  G  A/^x),  then  q  \  n  for  some  q  >  y  in  1Z.  For  a  fixed  q,  the  number 
of  such  n  <  x  is  \x/q\  <  x/q.  Hence, 


r  /  .  ^ X  ^ — >  1  X 

#u-2(x)<  £ 

y<g<i  ^  q>y  H 


q  £TZ 


gen 


(3) 


where  the  last  estimate  follows  from  estimate  (2)  by  the  Abel  summation 
formula. 


Case  3.  Af^x)  =  J\f(x)  \  (Afi(x)  Uj\f2(x)) . 

If  n  G  A/"3(x),  then  we  saw  that  there  exists  q  >  y  in  Q\1Z  dividing  n 
such  that  n  =  8  (mod  z(q))  for  some  5  G  {±1,  ±2}.  Since  q  =  2,  3  (mod  5), 
z(q)  divides  q  +  1,  therefore  q  and  z(q)  are  coprime.  Fixing  q  and  writing 
n  =  qm,  the  congruences  mq  =  8  (mod  z(q))  put  m  <  x/q  into  one  of  four 
possible  arithmetic  progressions  modulo  z(q).  The  number  of  such  integers 
for  a  fixed  q  is  therefore  at  most  A\x/qz(q)\  +4  <  4 x/qz(q)  +  4.  Summing 
up  the  above  bound  over  all  q  <  x  in  Q\1Z,  we  get  that 


#W3(a;)  <  4  -£-r  +  4vr(a;)  <  4x 

y<q<x^  '  '  q>y 

q^n 


1 


+  47t(x)  <C 


y 


+ 


X 


F3  log  x ' 


(4) 
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Comparing  estimates  (1),  (3),  (4),  it  follows  that  we  should  choose  y  such 
that 

yl/ 3  =  (log x/  logy) 1/2 ,  giving  y  =  (2/3  + 

as  x  — »  oo.  With  this  choice  for  y,  we  get  the  desired  result  from  (1),  (3) 
and  (4),  because 

#A f(x)  <  #Afi(x)  +  #N2{x)  +  #A f3(x). 


□ 


3  Comments  and  Remarks 

Id  d  7^  1,  we  used  neither  the  condition  that  (—d\p)  =  —1  for  all  prime 
factors  p  of  Fn,  nor  the  condition  that  Fn  is  squarefree  and  has  an  odd 
number  of  prime  factors.  It  is  likely  that  if  one  can  find  a  way  to  make 
use  of  these  conditions,  then  one  can  give  sharper  (smaller)  upper  bound 
on  than  that  of  Theorem  2.  Finally,  there  are  other  definitions  of 

elliptic  Carmichael  numbers  N  which  apply  to  elliptic  curves  without  CM  (see 
for  example  [7]).  It  was  shown  in  [7]  that  the  set  of  N  which  are  Carmichael 
for  E  in  that  sense  is  of  asymptotic  density  zero.  It  would  be  interesting  to 
show  that  the  set  of  n  such  that  Fn  is  elliptic  Carmichael  in  that  sense  is  also 
a  set  of  asymptotic  density  zero.  The  methods  of  this  paper  do  not  seem  to 
shed  much  light  on  this  modified  problem. 
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